For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mnb_63148's avatar
mnb_63148
Icon for Nimbostratus rankNimbostratus
Feb 20, 2014

Does F5 automatically delete cookies in the header?

I have an issue where cookies are not always showing in the HTTP header. This is causing session timeouts when users are trying to log into a site and when they are randomly clicking around in a site...
smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Feb 20, 2014

In v10 at least, the HTTP profile has a "Maximum Header Size" property. Mine, which I believe is the default, is set to 32768 (32Kb). In situations where I've encountered this, there's a entry written to /var/log/ltm and the TCP connection is reset.

 

But resetting the TCP connection is much different than stripping out a header and load-balancing the request. I believe you can cause the LTM to strip out headers based on some of the HTTP profile properties, and you can certainly do it with an iRule. But I don't believe there's any inherent/default LTM behavior that would cause it to strip out a header.